This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/6d2a28-bc83-42d5-8556-9409d91090fa/1/SulUeNH4yTw4wuibtQPCkvrNimE.roa File: SulUeNH4yTw4wuibtQPCkvrNimE.roa (raw, json) Hash identifier: /lThE7QiTo8Pw3w2T2Wjjtw5V8Pd4Y+WCHuTrGI19CM= Subject key identifier: 4A:E9:54:78:D1:F8:C9:3C:38:C2:E8:9B:B5:03:C2:92:FA:CD:8A:61 Certificate issuer: /CN=f296fa79967e1aea042602f93242880a9543938b Certificate serial: 019B797E62AA685912369C3385F5B9B9C847 Authority key identifier: F2:96:FA:79:96:7E:1A:EA:04:26:02:F9:32:42:88:0A:95:43:93:8B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8pb6eZZ-GuoEJgL5MkKICpVDk4s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/6d2a28-bc83-42d5-8556-9409d91090fa/1/SulUeNH4yTw4wuibtQPCkvrNimE.roa Signing time: Thu 01 Jan 2026 12:18:04 +0000 ROA not before: Thu 01 Jan 2026 12:18:04 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 41960 IP address blocks: 85.209.140.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/6d2a28-bc83-42d5-8556-9409d91090fa/1/8pb6eZZ-GuoEJgL5MkKICpVDk4s.crl rsync://rpki.ripe.net/repository/DEFAULT/72/6d2a28-bc83-42d5-8556-9409d91090fa/1/8pb6eZZ-GuoEJgL5MkKICpVDk4s.mft rsync://rpki.ripe.net/repository/DEFAULT/8pb6eZZ-GuoEJgL5MkKICpVDk4s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:01:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:62:aa:68:59:12:36:9c:33:85:f5:b9:b9:c8:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f296fa79967e1aea042602f93242880a9543938b Validity Not Before: Jan 1 12:18:04 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4ae95478d1f8c93c38c2e89bb503c292facd8a61 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:7a:1a:38:cf:30:91:42:56:94:97:e7:ac:db: f4:1b:87:80:23:bc:50:91:0f:ee:e1:66:af:06:50: bf:32:42:2d:b6:1a:31:c4:44:ad:87:45:b4:fb:0d: d3:89:11:91:e8:a2:bc:cd:80:f6:8d:2b:fe:a5:71: 25:7a:ac:a1:6d:0f:5b:55:e1:a4:10:0b:6d:b5:51: a7:b1:b4:fa:5c:11:1d:bf:50:0e:c5:49:31:81:ec: f1:04:c3:e4:23:d9:fa:e6:7f:ec:0b:97:c3:c1:80: 0a:73:80:5d:8f:28:0f:c2:08:c7:38:2f:b9:19:93: d1:ce:b7:4f:69:56:03:87:f9:ea:63:01:ba:9a:e2: 14:34:b0:73:16:55:48:ce:61:b2:c5:9b:b9:6d:32: 17:ce:14:70:6a:23:e0:36:17:04:d6:5d:ee:69:ea: 1c:e5:9d:a2:93:79:3a:74:c8:e0:34:63:4a:8a:4a: ef:42:80:78:bf:8f:93:c8:f0:b1:a0:d6:a1:64:df: f9:41:ba:29:36:67:65:96:0a:63:b3:2a:4a:8f:01: ed:93:6b:ce:50:cd:4f:ba:f7:c7:a6:3b:0c:06:9a: 23:68:a1:d4:a0:ce:1b:d1:41:d2:7c:a3:e4:6f:a5: 6a:b8:9f:95:e2:d0:7f:b6:e1:f1:7c:e1:25:80:ea: c6:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:E9:54:78:D1:F8:C9:3C:38:C2:E8:9B:B5:03:C2:92:FA:CD:8A:61 X509v3 Authority Key Identifier: keyid:F2:96:FA:79:96:7E:1A:EA:04:26:02:F9:32:42:88:0A:95:43:93:8B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8pb6eZZ-GuoEJgL5MkKICpVDk4s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/6d2a28-bc83-42d5-8556-9409d91090fa/1/SulUeNH4yTw4wuibtQPCkvrNimE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/72/6d2a28-bc83-42d5-8556-9409d91090fa/1/8pb6eZZ-GuoEJgL5MkKICpVDk4s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.209.140.0/24 Signature Algorithm: sha256WithRSAEncryption 9a:97:3a:57:b8:b6:30:25:0a:08:64:b0:44:9a:18:bd:f8:64: e1:5c:ff:6e:fb:7d:c9:ad:40:a1:a6:cd:bd:ec:01:93:0a:99: d4:3d:2a:be:a0:f5:5c:84:db:59:9c:dc:ab:bf:bb:85:0c:96: ba:77:af:d7:6a:36:b6:3f:45:ee:c7:54:51:57:14:8d:e8:63: 04:f2:6a:5a:f9:30:19:76:2e:1d:4b:19:db:d0:7f:1d:9e:73: e2:8a:f7:65:df:a3:03:ce:c4:cf:af:b1:c3:62:9d:79:70:b3: 09:e8:16:66:32:46:d3:48:85:cd:2e:5c:63:34:0a:37:d9:94: bd:20:58:04:5f:9e:18:7e:57:12:bc:16:c7:52:f5:10:3d:76: 48:b3:d4:42:49:17:0a:42:e6:1c:2b:19:af:43:73:3d:84:2c: 0d:ba:63:2f:18:9d:b9:ab:84:5a:d8:cc:c9:78:98:94:fa:0f: 6c:3a:fa:28:f4:e7:08:8b:6e:25:dd:c1:ce:b4:bd:c0:68:3f: a0:13:c2:e2:57:77:ed:4c:34:b3:16:5c:08:52:a3:32:51:3d: 88:f4:1f:42:ce:86:ad:bb:2f:7e:28:ba:15:c8:70:9a:7a:72: 9b:95:81:78:84:16:44:19:5f:d0:7d:59:85:60:63:7c:7d:75: 27:39:41:56 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5fmKqaFkSNpwzhfW5uchHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYyOTZmYTc5OTY3ZTFhZWEwNDI2MDJmOTMyNDI4ODBhOTU0 MzkzOGIwHhcNMjYwMTAxMTIxODA0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0YWU5NTQ3OGQxZjhjOTNjMzhjMmU4OWJiNTAzYzI5MmZhY2Q4YTYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq3oaOM8wkUJWlJfnrNv0G4eAI7xQ kQ/u4WavBlC/MkItthoxxESth0W0+w3TiRGR6KK8zYD2jSv+pXEleqyhbQ9bVeGk EAtttVGnsbT6XBEdv1AOxUkxgezxBMPkI9n65n/sC5fDwYAKc4BdjygPwgjHOC+5 GZPRzrdPaVYDh/nqYwG6muIUNLBzFlVIzmGyxZu5bTIXzhRwaiPgNhcE1l3uaeoc 5Z2ik3k6dMjgNGNKikrvQoB4v4+TyPCxoNahZN/5QbopNmdllgpjsypKjwHtk2vO UM1PuvfHpjsMBpojaKHUoM4b0UHSfKPkb6VquJ+V4tB/tuHxfOElgOrGlwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFErpVHjR+Mk8OMLom7UDwpL6zYphMB8GA1UdIwQY MBaAFPKW+nmWfhrqBCYC+TJCiAqVQ5OLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOHBiNmVaWi1HdW9FSmdMNU1rS0lDcFZEazRzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Mi82ZDJhMjgtYmM4My00MmQ1LTg1NTYt OTQwOWQ5MTA5MGZhLzEvU3VsVWVOSDR5VHc0d3VpYnRRUENrdnJOaW1FLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Mi82ZDJhMjgtYmM4My00MmQ1LTg1NTYtOTQwOWQ5MTA5MGZh LzEvOHBiNmVaWi1HdW9FSmdMNU1rS0lDcFZEazRzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAVdGMMA0G CSqGSIb3DQEBCwUAA4IBAQCalzpXuLYwJQoIZLBEmhi9+GThXP9u+33JrUChps29 7AGTCpnUPSq+oPVchNtZnNyrv7uFDJa6d6/Xaja2P0Xux1RRVxSN6GME8mpa+TAZ di4dSxnb0H8dnnPiivdl36MDzsTPr7HDYp15cLMJ6BZmMkbTSIXNLlxjNAo32ZS9 IFgEX54YflcSvBbHUvUQPXZIs9RCSRcKQuYcKxmvQ3M9hCwNumMvGJ25q4Ra2MzJ eJiU+g9sOvoo9OcIi24l3cHOtL3AaD+gE8LiV3ftTDSzFlwIUqMyUT2I9B9Czoat uy9+KLoVyHCaenKblYF4hBZEGV/QfVmFYGN8fXUnOUFW -----END CERTIFICATE-----Generated at Mon Jan 26 23:48:44 2026 by rpki-client